Fortinet Fortinet Certifications NSE5_FAZ-5.4 Questions & Answers

• Question 11:

  What can the CLI command # diagnose test application oftpd 3 help you to determine?

  A. What logs, if any, are reaching FortiAnalyzer

  B. What ADOMs are enabled and configured

  C. What devices and IP addresses are connecting to FortiAnalyzer

  D. What devices are registered and unregistered

  Correct Answer: C

• Question 12:

  What FortiView tool can you use to automatically build a dataset and chart based on a filtered search result?

  A. Chart Builder

  B. Dataset Library

  C. Custom View

  D. Export to Report Chart

  Correct Answer: A

• Question 13:

  FortiAnalyzer uses the Optimized Fabric Transfer Protocol (OFTP) over SSL for what purpose?

  A. To prevent log modification during backup

  B. To send an identical set of logs to a second logging server

  C. To encrypt log communication between devices

  D. To upload logs to a SFTP server

  Correct Answer: B

• Question 14:

  In order for FortiAnalyzer to collect logs from a FortiGate device, what configuration is required? (Choose two.)

  A. ADOMs must be enabled

  B. Log encryption must be enabled

  C. FortiGate must be registered with FortiAnalyzer

  D. Remote logging must be enabled on FortiGate

  Correct Answer: AC

• Question 15:

  Which FortiAnalyzer feature allows you to retrieve the archived logs matching a specific timeframe from another FortiAnalyzer device?

  A. Log forwarding in aggregation mode

  B. Log upload

  C. Log fetching

  D. Indicators of Compromise

  Correct Answer: A

• Question 16:

  You've moved a registered logging device out of one ADOM and into a new ADOM. What happens when you rebuild the new ADOM database?

  A. FortiAnalyzer resets the disk quota of the new ADOM to default

  B. FortiAnalyzer migrates analytics logs to the new ADOM

  C. FortiAnalyzer removes analytics logs from the old ADOM

  D. FortiAnalyzer migrates archive logs to the new ADOM

  Correct Answer: C

• Question 17:

  View the exhibit: What does the 1000 MB maximum for disk utilization refer to?

  

  A. The disk quota for each device in the ADOM

  B. The disk quota for the ADOM type

  C. The disk quota for all devices in the ADOM

  D. The disk quota for the FortiAnalyzer model

  Correct Answer: A

• Question 18:

  On FortiAnalyzer, what is a wildcard administrator account?

  A. An account that permits access to members of a LDAP group

  B. An account that allows guest access with read-only privileges

  C. An account that requires two-factor authentication

  D. An account that validates against any user account on a FortiAuthenticator

  Correct Answer: D

• Question 19:

  What is the purpose of employing RAID with FortiAnalyzer?

  A. To provide data separation between ADOMs

  B. To separate analytical and archive data

  C. To back up your logs

  D. To introduce redundancy to your log data

  Correct Answer: D

• Question 20:

  View the exhibit.

  

  What does the data point at 14:35 tell you?

  A. The sqlplugind daemon is ahead in indexing by one log

  B. FortiAnalyzer is indexing logs faster than logs are being received

  C. FortiAnalyzer is dropping logs

  D. FortiAnalyzer has temporarily stopped receiving logs so older logs can be indexed

  Correct Answer: A